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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address •• 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to communication(s) filed on 26 March 2001 . 
2a)D This action is FINAL. 2b)H This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-20 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) I3 Claim(s) 1-20 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1 . 121 (d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . Claims 1 -20 are pending. 

2. The Information Disclosure Statements respectfully submitted on 01 June 2004 
and 28 September 2004 have been considered by the Examiner. 

Claim Rejections - 35 USC §102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 1-20 are rejected under 35 U.S.C. 102(e) as being anticipated by Sehr 
(U.S. Patent No. 6, 609, 659). Referring to the rejection of claims 1 and 13, Sehr 
discloses a method and product for managing customer security features by a security 
server, comprising: receiving a request from a requestor, authenticating the requestor, 
and manipulating one or more security features stored in a data area corresponding to a 
customer in response to the request in Column 15, lines 42-67, Column 16, lines 1-4, 
Column 17, lines 41-47, Column 29, lines 59-67, Column 30, lines 1-7, 22-45. 

As per claims 2 and 14, Sehr discloses the claimed limitation wherein at least one of the 
security features is selected from the group consisting of a photograph of the customer, 
a customer signature, a digital signature corresponding to the customer, a fingerprint, 
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and a description of the customer in Column 6, lines 58-67, Column 13, lines 9-42, 
Column 18, lines 26-42, and Column 29, lines 5-30. 

As per claims 3,12, and 15, Sehr discloses the claimed limitation wherein receiving one 
or more new security features from the customer, assigning an item identifier to each of 
the new security features, and storing the new security features in the data area 
corresponding to the customer in Column 18, line 67, Column 19, lines 1-8, and Column 
22, lines 35-51. 

As per claims 4,11, and 16, Sehr discloses the claimed limitation wherein receiving an 
authorization from a customer, the authorization including a first merchant identifier, 
storing the authorization, receiving a retrieval request from a merchant, the retrieval 
request including a customer identifier corresponding to the customer and a second 
merchant identifier corresponding to the merchant, validating the merchant request, the 
validating including: retrieving the authorization, comparing the first merchant identifier 
to the second merchant identifier, and returning one or more security features 
corresponding fo the customer in response to the first merchant identifier matching the 
second merchant identifier in Column 24, lines 65-67, Column 25, lines 1-16, Column 
26, lines 10-67, and Column 27, lines 1-14. 

As per claims 5 and 17, Sehr discloses the claimed limitation wherein receiving an 
authorization from a customer, the authorization including a public key corresponding to 
the merchant, storing the authorization and the merchant's public key, receiving an 
encrypted retrieval request from a merchant, the encrypted retrieval request encrypted 
using a private key corresponding to the merchant's public key, deciphering the 
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encrypted retrieval request using the stored public key, and returning one or more 
security features corresponding to the customer in response to the deciphering in 
Column 30, lines 62-67, Column 31, lines 1-67, and Column 32, lines 1-3. 
As per claims 6 and 18, Sehr discloses the claimed limitation wherein receiving an edit 
request from a customer, the edit request including a customer identifier and one or 
more updated security features, the security features each including an security item 
identifier, locating a stored security feature corresponding to each of the security item 
identifiers, and replacing the stored security features with the updated security features 
in Column 22, lines 15-51 and Column 24, lines 24-58. 

As per claims 7 and 19, Sehr discloses the claimed limitation wherein verifying the 
customer, the verifying including: receiving a secret customer identifier from the 
customer, and comparing the secret customer identifier with a stored secret customer 
identifier corresponding to the customer in Column 20, lines 21-52. 
As per claims 8,10, and 20, Sehr discloses the claimed limitation wherein the request 
includes an encrypted packet that is encrypted using a private key corresponding to the 
requestor, the method comprising: locating a stored public key corresponding to the 
requestor, and deciphering the encrypted packet using the stored public key, the 
deciphering verifying the identity of the requestor, wherein the manipulating is 
performed in response to the encrypted packet being successfully deciphered in 
Column 30, lines 62-67, Column 31, lines 1-67, Column 32,*lines 1-3, and Column 43, 
lines 49-66. 
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3. Referring to the rejection of claim 9, Sehr discloses a information handling 
system comprising: one or more processors in Column 16, lines 24-34, a memory 
accessible by the processors in Column 5, line 33, Column 6, lines 22-44, a network 
interface for communicating with other information handling systems in Column 7, lines 
65-67, Column 8, lines 1-3, 65-67, Column 9, lines 1-25, one or more nonvolatile 
storage areas accessible by the processors in Column 5, lines 18-54, and a security 
feature management tool to manage customer security features in Column 5, lines 28- 
30, Column 14, lines 1-18, the security feature management tool including: means for 
receiving a request from a requestor, means for authenticating the requestor, means for 
manipulating one or more security features stored in a data area corresponding to a 
customer in response to the request in Column 15, lines 42-67, Column 16, lines 1-4, 
Column 17, lines 41-47, Column 29, lines 59-67, Column 30, lines 1-7, 22-45. 

Conclusion 

4. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. Lewis (U.S. Patent No. 6,779,720) discloses a method and 
apparatus for generating a ticket including an image of a person. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Courtney D. Fields whose telephone number is 571- 
272-3871. The examiner can normally be reached on Mon - Wed. 6:00 - 6:00 pm; Thur. 
6:00 - 10 am. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell can be reached on 571-272-3868. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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